Intrusion detection for mobile devices using the knowledge-based, temporal abstraction method

Journal of Systems and Software

Volumn 83, Issue 8, 2010, Pages 1524-1537

  Shabtai, Asaf ^a   Kanonov, Uri ^a   Elovici, Yuval ^a  

^a BEN GURION UNIVERSITY OF THE NEGEV   (Israel)

Author keywords

Android; Intrusion detection; Knowledge based systems; Malware; Mobile devices; Temporal reasoning

Indexed keywords

ANTI VIRUS; CONTINUOUSLY MEASURED DATA; DETECTION RATES; EVALUATION RESULTS; HOST-BASED INTRUSION DETECTION SYSTEM; MALICIOUS BEHAVIOR; MALWARES; MOBILE DEVICE SECURITY; NEW APPROACHES; PRE-DEFINED CLASS; SECURITY EXPERTS; SMARTPHONES; SOFTWARE INSTALLATIONS; SYSTEM ON MOBILE DEVICES; TEMPORAL ABSTRACTION; TEMPORAL PATTERN; TEMPORAL REASONING;

ABSTRACTING; COMPUTER CRIME; KNOWLEDGE BASED SYSTEMS; LAW ENFORCEMENT; MOBILE DEVICES; MOBILE TELECOMMUNICATION SYSTEMS; ONTOLOGY; PORTABLE EQUIPMENT; ROBOTS;

INTRUSION DETECTION;

EID: 77953137615     PISSN: 01641212     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.jss.2010.03.046     Document Type: Article

References (38)

1. Aguilar J. A survey about fuzzy cognitive maps papers. International Journal of Computational Cognition 3 2 (2005) 27-33
2. Allen J.F. Maintaining knowledge about temporal intervals. Communications of the ACM 26 11 (1983) 832-843
3. Bose, A., Hu, X., Shin, K.G., Park, T., 2008. Behavioral detection of malware on mobile handsets. In: Proceeding of the Sixth International Conference on Mobile Systems, Applications, and Services.
4. Botha R.A., Furnell S.M., and Clarke N.L. From desktop to mobile: examining the security experience. Computer and Security 28 (2009) 130-137
5. Buennemeyer, T.K. et al., 2008. Mobile device profiling and intrusion detection using smart batteries. International Conference on System Sciences, pp. 296-296.
6. Chakravarty S., and Shahar Y. CAPSUL: A constraint-based specification of repeating patterns in time-oriented data. Annals of Mathematics and AI 30 1-4 (2000) 3-22
7. Cheng, J., Wong, S.H., Yang, H., Lu, S., 2007. SmartSiren: virus detection and alert for smartphones. In: Proceedings of the Fifth International Conference on Mobile Systems, Applications and Services.
8. Dikinson J. The new antivirus formula (2005). http://www.ironport.com/pdf/ironport_new_anti-virus_formula.pdf http://www.ironport.com/pdf/ironport_new_anti-virus_formula.pdf
9. Ghosh, A.K., Schwartzbard, A., Schatz, M., 1999. Using program behavior profiles for intrusion detection. In: Proceedings of the First USENIX Workshop on Intrusion Detection and Network Monitoring.
10. Hwang S.S., Cho S., and Park S. Keystroke dynamics-based authentication for mobile devices. Computer and Security 28 (2009) 85-93
11. Jacoby, G.A., Davis, N.J., 2004. Battery-based intrusion detection. Global Telecommunications Conference (GLOBECOM'04).
12. Kim, H., Smith, J., Shin, K.G., 2008. Detecting energy-greedy anomalies and mobile malware variants. In: Proceeding of the Sixth International Conference on Mobile Systems, Applications, and Services.
13. Kohout L.J., Yasinsac A., and McDuffie E. Activity profiles for intrusion detection. North American Fuzzy Information Processing Society-Fuzzy Logic and the Internet (2002)
14. Lane T., and Brodley C.E. Temporal sequence learning and data reduction for anomaly detection. ACM Transactions on Information and System Security 2 3 (1999) 295-331
15. Li Y., et al. Enhancing profiles for anomaly detection using time granularities. Journal of Computer Security 10 1-2 (2002) 137-157
16. Martin, T., Hsiao, M., Ha, D., Krishnaswami, J., 2004. Denial-of-service attacks on battery-powered mobile computers. In: Second IEEE International Conference on Pervasive Computing and Communications, pp. 309-318.
17. Miettinen, M, Halonen, P., Hätönen, K., 2006. Host-based intrusion detection for advanced mobile devices. In: Proceedings of the 20th International Conference on Advanced Information Networking and Applications.
18. Moreau, Y., Verrelst, H., Vandewalle, J., 1997. Detection of mobile phone fraud using supervised neural networks: a first prototype. In: Proceedings of the Seventh International Conference on Artificial Neural Networks.
19. Morin, B., Debar, H., 2003. Correlation of intrusion symptoms: an application of chronicles. In: Proceedings Recent Advances in Intrusion Detection (RAID) Symposium.
20. Moskovitch, R., Shahar, Y., 2009. Medical temporal-knowledge discovery via temporal abstraction. AMIA 2009, San Francisco, USA.
21. Muthukumaran, D. et al., 2008. Measuring integrity on mobile phone systems. In: Proceedings of the 13th ACM Symposium on Access Control Models and Technologies.
22. Naldurg, P. et al., 2004. A temporal logic based framework for intrusion detection. In: Proceedings of the 24th Formal Techniques for Networked and Distributed Systems International Conference.
23. Nash, D.C. et al., 2005. Towards an intrusion detection system for battery exhaustion attacks on mobile computing devices. Pervasive Computing and Communications Workshops.
24. Ning P., Jajodia S., and Wang X.S. Abstraction-based intrusion detection in distributed environments. ACM Transactions on Information and System Security 4 4 (2001) 407-452
25. Piercy, M., 2004. Embedded devices next on the virus target list. IEE Electronics Systems and Software 2, December-January, pp. 42-43.
26. Racic, R., Ma, D., Chen, H., 2006. Exploiting MMS Vulnerabilities to Stealthily Exhaust Mobile Phone's Battery. Securecomm and Workshops, pp. 1-10.
27. Samfat D., and Molva R. IDAMN: an intrusion detection architecture for mobile networks. IEEE Journal on Selected Areas in Communications 15 7 (1997) 1373-1380
28. Schmidt A.D., Peters F., Lamour F., Scheel C., Camtepe S.A., and Albayrak S. Monitoring smartphones for anomaly detection. Mobile Networks and Applications (MONET) 14 1 (2009) 92-106
29. Seleznyov, A., Mazhelis, O., 2002. Learning temporal patterns for anomaly intrusion detection. In: Proceedings of the 17th ACM Symposium on Applied Computing.
30. Shabtai A., Fledel Y., Elovici Y., and Shahar Y. Using the KBTA method for inferring computer and network security alerts from time-stamped, raw system metrics. Journal in Computer Virology 8 3 (2009) 267-298
31. Shabtai, A., Elovici, Y., 2010. Applying behavioral detection on android-based devices. In: Proceedings of the 3rd International Conference on Mobile Wireless Middleware, Operating Systems, and Applications (Mobilware 2010), Springer, Chicago, USA.
32. Shahar Y. A framework for knowledge-based temporal abstraction. Artificial Intelligence 90 1-2 (1997) 79-133
33. Shahar Y., and Musen M.A. Knowledge-based temporal abstraction in clinical domains. Artificial Intelligence in Medicine 8 3 (1996) 267-298
34. Siraj, A., Vaughn, R.B., Bridges, S.M., 2004. Intrusion sensor data fusion in an intelligent intrusion detection system architecture. In: Proceedings of the 37th Hawaii International Conference on System Sciences.
35. Stach, W., Kurgan, L., Pedrycz, W., 2005. A survey of fuzzy cognitive maps learning method. In: Grzegorzewski, P., Krawczak, M., Zadrozny, S. (Eds.), Issues in Soft Computing: Theory and Applications, Exit, pp. 71-84.
36. Talbi M., Mejry M., and Bouhoula A. Specification and evaluation of polymorphic shellcode properties using a new temporal logic. Journal in Computer Virology (2008)
37. Yap T.S., and Ewe H.T. A mobile phone malicious software detection model with behavior checker. Lecture Notes in Computer Science 3597 (2005) 57-65
38. Ye, N., 2000. A Markov chain of temporal behavior for anomaly detection. Workshop on Information Assurance and Security.